Perfect Quantum Privacy Implies Nonlocality 
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Private states are those quantum states from which a perfectly secure cryptographic key can be 
extracted. They represent the basic unit of quantum privacy. In this work we show that all states 
belonging to this class violate a Bell inequality. This result establishes a connection between perfect 
privacy and nonlocality in the quantum domain. 
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Classical and quantum information theory (QIT) are 
mainly theories about resources Quantum features 
however make the quantum theory richer and more pow- 
erful than its classical counterpart. This richness is re- 
flected by the variety of different resources appearing in 
the quantum formalism. These are for instance entangle- 
ment Q, i.e., the existence of compound states that do 
not admit a description in terms of probabilistic combi- 
nations of products of states representing individual sub- 
systems, secret correlations Q, that is, correlations that 
cannot be created by public communication, and non- 
local correlations (see below) (if. While some of these 
resources, e.g., secret correlations, are also found in the 
classical formalism, most of them do not have a classi- 
cal analogue. This allows performing tasks that are not 
achievable in the classical world such as quantum telcpor- 
tation [H[ or secure key distribution 0, @] ■ The two gen- 
eral questions the theory addresses are (i) understanding 
those quantum resources necessary to accomplish an in- 
formation task and (ii) establishing intcrconvcrsion laws 
between all the different resources. 

A key step when comparing and quantifying resources 
consists of the identification of the basic unit for each 
of them. It is well established that a Bell state, that 
is, a two-qubit maximally entangled state, represents the 
basic unit of entanglement, known as e-bit [8(. Moving 
to secret correlations, Horodccki et al. showed that pri- 
vate states are the basic unit of privacy in the quantum 
domain 0, [Toj]. Clearly, all these states are entangled, 
as entanglement is a necessary condition for secure key 
distribution [ll|,[l2|. However, a Bell state is just the sim- 
plest state belonging to the larger class of private states. 
This implies that the distillation of privacy from quan- 
tum states is not equivalent to entanglement distillation, 
as it was commonly believed. Indeed, key (entanglement) 
distillation from a quantum state p can be understood as 
the process of extracting copies of private (Bell) states 
out of many copies of p. This nonequivalence is behind 
the existence of bound entangled states that, though not 
allowing for distillation of the Bell states |13|, arc a re- 
source for secure key distillation 0, ■ 

Beyond these results, however, the principles allow- 
ing for secure key distillation from quantum resources, 



a crucial question in QIT, are hardly understood. In 
order to achieve this, it is essential to identify the quan- 
tum properties common to all private states. It is well 
known that Bell states are nonlocal since they violate 
the Clauser-Horne-Shimony-Holt (CHSH) Bell inequal- 
ity 14J- Moved by this fact, one could ask whether all 
private states violate a Bell inequality. This is a priori 
unclear, as private states may exhibit radically different 
entanglement properties (Toj ] . 

In this work we address the above question and show 
that all private states are indeed nonlocal. This result is 
general, as our proof works for any dimension and any 
number of parties. Private states, then, not only rep- 
resent the unit of quantum privacy, but also allow two 
distant parties to establish a different quantum resource, 
namely, nonlocal correlations. These states contain the 
strongest form of entanglement as they can give rise to 
correlations with no classical analogue. More generally, 
our findings point out an intriguing connection between 
two of the most intrinsic quantum properties: privacy 
and nonlocality. 

Preliminaries. -Before proceeding with the proof of our 
results, we recall in what follows the notions of nonlocal- 
ity and private states. 

Consider first a Bell-type experiment in which party 
i can measure one of the fcj observables {^4.^^} 
: l,...,fc.j), each with r^' outcomes denoted by 
€ {1, . . . , rf*^}. We say that there exists a local 







model for this experiment if the conditional probabil- 
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Fine [15| showed that the existence of this model for the 
experiment is equivalent to the existence of a joint prob- 
ability distribution P{a^\ . . . , , . . . , aff, . . . , a^ N ^) 
involving all local measurements, such that the marginal 
probabilities reproduce the observed measured out- 
comes. The observed correlations are said to be 
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nonlocal if the conditional probability distributions Precisely, given vjf 1 we define the second Kraus operator 



,0'at)|^0'i) 



A% N >) do not admit a local to be wjf* = (1 - V^V^) 1 ^ with 1 being the iden- 



model. An iV-partitc quantum state Pn is then nonlocal 
whenever it is possible to find local measurements leading 
to nonlocal correlations when applied to pn- 

Now, let us pass to the definition of private states @, 
ToL 16, 17 1 . In general, these are iV-partite states that 



can be written as 
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where pa' is some density matrix, {Z7j} a set of uni- 
tary operations, and A = A\ . . . An and A' = A[ . . . A' N 
are multi-indices referring to subsystems. The subsys- 
tem marked with the subscript A consists of N qudits 
and is called the key part. The remaining subsystem is 
the shield part and is defined on some arbitrary finite- 
dimensional product Hilbert space H' = H[ ® . • • ® H'n- 
Party i holds one particle from the key part A4 and one 
from the shield part A\. The key point behind the pri- 
vate states is that log 2 d bits of perfectly secure bits of 
cryptographic key can be extracted from 

All private states are nonlocal. -We are in position to 
prove our main result. We divide the proof into two 
parts. First, following the ideas of Ref. [l(|, we show 
that using local quantum operations (represented by ap- 
propriately chosen quantum channels) without any use 
of classical communication, the key part of any private 
state (subsystem A), can be brought to the form 



= £ a kl (\W\r N 
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tity matrix acting on the A\ subsystem. Application of 
all the channels AW to T^), results in the following state 
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where matrices are defined as members of the 2 N - 



element set {K W , Wt v }® N . Explicitly, one has X 
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^ 1) ®...®y fc (JV) ,4 2) = v; (1) ®---®^ (iV " 1) < 
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so on. Tracing now the shield part we get the promised 
state ([31) with a k i given by 



an 
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One also finds that, since by construction V k V k + 

' — 'd)t' — '(i) 

Wf, Wf, = 1 for any i, the diagonal elements a k k of 
this state are equal to 1/d. 

Now we need to show that at least one of the above 
coefficients is nonzero. In other words, for some fixed pair 
of k and I (k < I) we need to choose the operators 

and Vr in such a way that a k i is nonzero. To this aim 
we simplify a little our considerations by assuming that 
the operators and corresponding to ith party 
are positive and diagonal in the same basis. Thus, we 
can write these particular operators in the form 
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with a kk = 1/rf and at least one off-diagonal element 
nonzero; i.e., there exists a pair of indices k < I such 
that a k i 7^ 0. Note that the shield part is discarded dur- 
ing this process. Second, we show that any state of the 
form ([3]) with a k i 7^ is nonlocal. Finally, the fact that 
local operations without classical communication cannot 
produce a nonlocal state from a local one implies that all 
private states are nonlocal. 

Let us now proceed with the first part of the proof. 
For this aim we assume that the zth party performs, on 
its subsystems Ai and A\, the quantum operation repre- 
sented by the following quantum channel 



A (i)(.) = y(i)(.)y«t + W {l) {-)W^\ 



(4) 



where the Kraus operators and are given by 
V® = £ \k)(k\ A ^V k i% \ w® = £ \k)(k\ Ai ®Wj?\ 



where we assume that the eigenvalues satisfy v m ' , C G 



(i) Ui) 

[0, 1] and the eigenvectors \&m ) are orthonormal, i.e., 
(dm ) = $mn (note that the fixed indices k,l we are 
interested in are omitted in the right hand side of the- 
previous expression). This, in turn means that the oper- 
ators and Wi are also diagonal in the basis {\em )}, 
and have eigenvalues (1 — vt' 2 ) 1 ' 2 and (1 — v m ) 1 ^ 2 , re- 
spectively. As a consequence the operator appearing in 
parenthesis in Eq. (|5|) simplifies to 



£# 



(*) i W^ e W 



(6) 
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where its eigenvalues are given by $ 
u W 2 )i/2( 1 _ ^2)1/2 and obviously satisfy < < 1 
Now, putting Eq. © to Eq. (J5J, we get 



The operators V k and W k act on the shield part be- 
longing to the ith party (the A' t subsystem) and are cho- 
sen so that they define a proper quantum measurement. 



a k i 
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Finally, to prove that ctki 7^ it suffices to notice that for 
any nonzero matrix X (and in particular UkpUj) there 
always exists at least one N partite product vector \tp) = 
• • • |^jv) such that (ip\X\ip) is nonzero. Otherwise, if 
for all such vectors (i/j\X\ip) = 0, the matrix X has to be 
the zero matrix (see Lemma 2 of Ref . [l9| ) . 

As just discussed, there exists a product vector \ip) 
such that (ip\U k pUl\ip) ^ for a pair of indices k < I. 



r(0 



and V t ' for each 



Therefore we can always chose V k 
party in such way that is one of the product vectors 
appearing in Eq. (0 (more precisely, \ipi) can be set as 
one of eigenvectors of vjf* and Vj ). Now, we can use the 

freedom in the numbers fim in such a way that au 7^ 0, 
which is exactly what we wanted to prove. Actually, 

— (i) 

we can always choose V^m so that at least one of the 



coefficients a's in each row and column of gff is nonzero. 

Let us move to the second part of the proof. In what 
follows we show that any state of the form ([3]) is nonlocal. 
First we will consider the bipartite case and then we will 
move to the multipartite scenario. 

Bipartite case (d = 2). -A generic form of the simplest 
example of bipartite private states (two-qubit key part) 
reads (zeros denote null matrices of adequate dimension) 



,(2) = £ 



AA' 
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(8) 



After applying the previous local quantum operations to 
this state the parties are left with a two-qubit state: 



(2) 

02 = 



/ 1/2 001 \ 





V «oi 1/2 J 



(9) 



Since we already know that «oi 7^ 0, it follows from the 
criterion proposed in Ref. [2^ that the above state vio- 
lates the CHSH-Bcll inequality 1141 (here written in the 
equivalent Clauser-Horne form [21]) 



P{A\B 2 ) - P{A 2 B 2 ) 
P{A 1 )-P{B 1 )<Q. (10) 



Here P(AiBj) denotes the probability that Alice and Bob 
obtain the first result upon the measurement of observ- 
ables Ai and Bj = 1, 2). Recall that the CHSH test 
involves the measurement of two dichotomic observables 
per site. 

Bipartite case (d > 2). -For higher dimensional bipar- 
tite private states we use the fact that the inequality (fTUj) 
only involves one measurement outcome for each of the 
observables. For this purpose, let us first assume that 



some aui is nonzero and rewrite g 2 d ^ (cf. Eq. ([5])) as 



\ 



l/d 



otki ■ ■ ■ 



l/d 



V 



(11) 



The marked 2x2 submatrix can be seen, up to a nor- 
malization factor 2/d, as a two-qubit state like the one 
given in Eq. As we have just shown, any such two- 
qubit state with nonzero off-diagonal element is nonlocal. 
Therefore, to prove nonlocality of we can design the 
observables Ai and Bj (i = 1,2) so that their first out- 
comes correspond to one-qubit projectors (embedded in 
C d ) leading to the violation of (jTU)) by the correspond- 
ing two-qubit state. Precisely, we take the projectors 



>(') 



IViX^I and V [ s\= (* = 1,2), where the 

pure states \ipi) and \ipi) are of the general one-qubit 
form a\k) + b\l). The remaining outcomes (which are ir- 
relevant from the point of view of the inequality (jTUJ) ) of 
the involved observables Aj(_Bj) can just correspond to 

projectors 1 - Va(b) = 1 ' 2 )- 

Now, by using these settings in the CHSH test (fTUT) . 
one sees that the state (fTTj) leads to almost the same vio- 
lation as for the two-qubit state in Eq. (|9|) with the only 
difference being the normalization factor 2/d. Clearly, 
this does not cause any problem since the same factor 
appears in all the terms of the inequality. Therefore it 
does not change the sign of the CHSH parameter (jTU)) . As 
a conclusion the CHSH-Bcll inequality for any bipartite 
state g 2 d ^ is also violated. 

Multipartite case. -We now move to the multipartite 
case. In order to prove the nonlocality of the states ((3]) 
we exploit the fact that, given a generic TV-partite state, 
PNi if there exist local projections of N — m particles onto 
a product state leaving the remaining m particles in a 
nonlocal state, p m , the initial state pn is nonlocal. This 
follows from the fact that one cannot produce in this way 
a nonlocal state from a local one. The same reasoning 
was used, e.g., in Ref. [22[ in the context of proving the 
nonlocality of general multipartite pure entangled states. 

Indeed, denote by Ai (i = m + 1,...,N) the lo- 
cal measurements (with outcomes a,) by the previous 
N — m parties such that for one of the outcomes, 
say 0, the state p m shared by the remaining m par- 
ties is nonlocal. For the sake of simplicity wc as- 
sume that the nonlocality of this m-partite state can 
be proven with only two measurements per site, Ai and 
A[ with outcomes ai and a' i (i = 1 , . . . , m) (our rea- 
soning can be trivially adapted to Bell tests involving 
more measurements). According to Fine's result (see 
above), there cannot exist a joint probability distribution 
P(a\,a' x , . . .,a m ,a' m \a m+ i = 0, . . . , a N = 0) reproducing 
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the observed outcomes for the m parties conditioned on 
the fact that the measurement result for the remaining 
N — m parties was equal to 0. Now, consider a Bell test 
for the initial A-partite state p^ where the parties ap- 
ply all the previously introduced measurements. Assume 
that the obtained statistics can be described by a local 
model. Then, there exists a joint probability distribu- 
tion P(ai, a[, . . . , a rn , a' m , a m +i, . . . , a at). But this would 
immediately imply the existence of the joint probability 
distribution P(oi, a[, . . . , a mi a' m \a m+ \ = 0, . . . , ajv = 0), 
which is in contradiction with the fact that g rn is nonlo- 
cal. Thus, the initial state pn has to be nonlocal. 

Using this argument, in order to prove the nonlocality 
of multipartite states gffl it is enough to build local pro- 
jections mapping these states into a nonlocal state of a 
fewer number of particles. Consider the local projections 
P onto \4>) = (1/Vd)(|0) + ... + \d- 1)). Projecting an 
arbitrary subset of TV — m particles of gff onto P^ the re- 
maining m parties are left with following m-partite state 

d-l 

q£ ] = E ^i(\m\r m - (12) 

fe,i=0 

Thus, if iV — 2 parties apply the projector P^ to the state 
(|3]), the remaining two parties are left with a bipartite 
private state ■ However, we have just shown that this 
state is nonlocal. Thus, gffl must also be nonlocal. 

Discussion. -Private states play a relevant role in QIT 
because they represent perfectly secure bits of crypto- 
graphic key 0, I lOL [l7| . Knowing their entanglement 
properties is crucial to understand the mechanism al- 
lowing for secure key distribution from quantum states. 
In general, private states are thought to have a weaker 
form of entanglement than Bell states. However, we have 
shown here that all private states are nonlocal. They 
have, then, the strongest form of quantum correlations, 
since the results of local measurements on these states 
cannot be reproduced by classical means. 

Finally, it would be interesting to study how our find- 
ings can be related to the Peres conjecture [23|, a long- 
standing open question in quantum information theory. 
This conjecture states that bound entangled states do 
not violate any Bell inequality. The intuition is that 
these states have a very weak form of quantum corre- 
lations. Then, all the correlations obtained from these 
states should have a classical description. Note, however, 
that there exist bound entangled states with positive par- 
tial transposition which are arbitrarily close (in the trace 
norm) to private states 0, [1(3, E3, EM 0] ■ This is indeed 
the reason why these examples of bound entangled states 
have nonzero distillablc cryptographic key. But, as shown 
here, all private states are nonlocal. One would then be 
tempted to conclude that these bound entangled states 
are also nonlocal. Interestingly, the situation is subtler 
than initially thought. In fact, recall that the nonlocality 



of private states has been proven here by showing the vi- 
olation of the CHSH-Bcll inequality. Unfortunately, this 
inequality cannot be violated by bound entangled states 
with positive partial transposition [25I ] . This implies that 
the violation of this inequality by private states arbitrar- 
ily close to bound entangled states has to be very small. 
In view of all these findings it appears interesting to an- 
alyze the nonlocal properties of bound entangled states 
with positive distillable secret key. 
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